Attachments
(1.36 KiB) Downloaded 20 times
next
https://www.virustotal.com/en/file/cd15 ... 553198197/
A forum for reverse engineering, OS internals and malware analysis
Attachments
(73.91 KiB) Downloaded 19 times
ikolor wrote: ↑Thu Mar 21, 2019 7:59 pm nextEmotet downloader.
https://www.virustotal.com/en/file/cd15 ... 553198197/
Downloads exe from:
Code: Select all
Connects to CnC servers:
hxxp://siamnatural.com/tmp/EmC/Code: Select all
hxxp://185.94.252.3:443/bml/tlb/ringin/
hxxp://185.94.252.3:443/ringin/arizona/ringin/merge/
hxxp://5.196.133.206:443/whoami.php
May Somebody borrow my glasses because I don't see you nothing .
Black ,grey Why do you used that stupid color .????
https://www.virustotal.com/en/file/7724 ... /analysis/
Black ,grey Why do you used that stupid color .????
https://www.virustotal.com/en/file/7724 ... /analysis/
Attachments
(381.86 KiB) Downloaded 22 times
Attachments
(21.76 KiB) Downloaded 18 times
Attachments
(4.04 KiB) Downloaded 19 times
ikolor wrote: ↑Tue Apr 09, 2019 6:20 pm NextSimple poor vbs script to download file from " hxxp://adhost22.sslblindado.com/win.png " ( Not available now )
https://www.virustotal.com/en/file/eb9c ... 554833892/
write the downloaded file on disk as "fchhcbbda.exe" in the path "C:\"
ikolor wrote: ↑Wed Apr 10, 2019 2:11 pm nextEmotet downloader
https://www.virustotal.com/en/file/c5aa ... 554905298/
download exe file from : "hxxp://gajananled.com/wp-admin/GKb3/"
the downloaded emotet malware : https://www.virustotal.com/#/file/995a6 ... 3/behavior
Attachments
(89.97 KiB) Downloaded 13 times
ikolor wrote: ↑Mon Apr 15, 2019 12:47 pm What is this !!PDF, Word phishing.
https://www.virustotal.com/en/file/dbc0 ... 555332252/
PDF and Word document contains a phishing link of Microsoft:
Code: Select all
hxxp://odontotepuy.com.ve/bossgate/office365/cha/The_BACHA